Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-11...er.exe

windows7-x64

9

2024-05-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-11_f59decbad7b8b69280e670c74996fb63_cryptolocker

  • Size

    57KB

  • Sample

    240511-rl1p2sbc21

  • MD5

    f59decbad7b8b69280e670c74996fb63

  • SHA1

    d0eb5464c8ef25697d2e5e1db03f183749d08018

  • SHA256

    46fb891c5563abe506f79ed9831354774b36bd48b4bf13f9e506d9bec1951d5f

  • SHA512

    97235733e15d5592dcd1ed3b3024ab97c4a94e27b32c96d00d6a54e981b7924431baf9c18c78862f967b3501db3bcfe004cf53e704f6bdd7872ac61d3bbefb26

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv6dl4Gt:vj+jsMQMOtEvwDpj5HH1nw73KOFiT

Score
10/10

Malware Config

Targets

    • Target

      2024-05-11_f59decbad7b8b69280e670c74996fb63_cryptolocker

    • Size

      57KB

    • MD5

      f59decbad7b8b69280e670c74996fb63

    • SHA1

      d0eb5464c8ef25697d2e5e1db03f183749d08018

    • SHA256

      46fb891c5563abe506f79ed9831354774b36bd48b4bf13f9e506d9bec1951d5f

    • SHA512

      97235733e15d5592dcd1ed3b3024ab97c4a94e27b32c96d00d6a54e981b7924431baf9c18c78862f967b3501db3bcfe004cf53e704f6bdd7872ac61d3bbefb26

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv6dl4Gt:vj+jsMQMOtEvwDpj5HH1nw73KOFiT

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks